I've recently been given the task of securing a small network. One of the things we want to have happen is to have the computers lock down after a period of inactivity.
The easy thing for this, of course, is to require a password after the computer goes to sleep or the screen saver starts. The only problem is that I have users unchecking this, as it's a user preference (they don't need to authenticate as an admin to turn it off).
I know I can log them out after a period of inactivity, but that closes all files and programs and is a bit more of a pain for everyone. If I could just have the password prompt all the time, we'd be satisfied.
Is there a way to make the user preference "require password to wake computer from sleep or screen saver" only editable to an admin account?
The clients in question are using 10.5.8.
Thank you for any help you can provide.
Profile Manager
(or use other methods to use a profile/.mobileconfig) and then set the option in the profile, and/or you could go one step further and not allow your network users to reach the "Securtiy & Privacy" settings at all. Could follow up with lots of details if needed.